Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1PBFX3Re-TwtZb9z8FP2MbOuzYA.cer
File: 1PBFX3Re-TwtZb9z8FP2MbOuzYA.cer (raw, json)
Hash identifier: WUJ25jnNXqBBZcuc4TlYIYCQPjewbfJVcPbiW16Biw8=
Subject key identifier: D4:F0:45:5F:74:5E:F9:3C:2D:65:BF:73:F0:53:F6:31:B3:AE:CD:80
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019F18FB26D97CDDE92216FC08BD47D63862
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/1PBFX3Re-TwtZb9z8FP2MbOuzYA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 30 Jun 2026 14:42:20 +0000
Certificate not after: Thu 01 Jul 2027 00:00:00 +0000
Subordinate resources: IP: 193.43.183.0/24
IP: 2001:67c:66c::/48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:fb:26:d9:7c:dd:e9:22:16:fc:08:bd:47:d6:38:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jun 30 14:42:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4f0455f745ef93c2d65bf73f053f631b3aecd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e2:d0:d7:66:ef:11:a5:99:53:59:54:13:5d:
35:dc:84:91:cf:f6:7a:b2:cd:1c:83:8b:76:b5:a9:
76:4f:3b:c8:12:42:93:da:be:c4:2a:d4:87:bb:fe:
c8:71:c2:7d:6e:77:72:8d:dd:58:b2:31:8e:ed:7c:
44:63:54:23:04:f8:38:0c:6a:c0:99:c9:f1:9f:8f:
2f:29:15:dc:50:7a:22:fe:b8:cd:59:eb:a7:a6:c5:
24:fc:f7:54:1c:f1:3f:c7:97:71:9f:5a:79:f0:a6:
b7:07:fe:b5:ca:86:4b:8d:63:ac:72:33:88:2a:5e:
47:bc:97:7f:bf:e4:8f:8a:ea:88:79:64:eb:e6:4c:
7f:83:67:ce:c0:1e:9e:46:82:ac:9c:25:e7:06:83:
4a:1f:bc:f1:91:79:b2:ff:fa:2b:ca:46:56:9d:8b:
ac:d3:a3:00:dc:43:6a:f5:6e:b8:c9:d4:d5:9a:ac:
db:42:f2:4c:36:15:de:af:82:01:06:6e:ea:17:9e:
b0:c9:68:df:e8:24:dd:16:b2:8b:6a:73:72:9a:c5:
ac:65:4c:b7:c4:10:15:18:c3:43:2a:e1:d2:81:b7:
7f:45:e4:9e:dd:97:fa:7f:08:f1:16:bf:b2:bb:55:
f7:96:b6:42:98:15:79:fc:06:65:6f:0a:39:42:a4:
b9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F0:45:5F:74:5E:F9:3C:2D:65:BF:73:F0:53:F6:31:B3:AE:CD:80
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/834f9d-55b7-455b-96bb-9cccb7ef3b5b/1/1PBFX3Re-TwtZb9z8FP2MbOuzYA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.183.0/24
IPv6:
2001:67c:66c::/48
Signature Algorithm: sha256WithRSAEncryption
79:17:89:7b:8d:ee:ac:76:bb:3c:8b:ab:09:49:83:19:e4:5d:
8b:29:22:cc:f6:cd:a3:f4:40:fe:26:8e:0c:9c:50:8c:c7:a9:
68:7c:c1:c0:9e:15:1d:af:89:2a:a7:ea:9b:41:32:8c:ab:41:
25:c7:26:67:cb:67:ac:5d:fd:57:c9:96:e6:78:cd:e6:1a:2a:
e2:e8:dd:93:4a:dc:61:a9:17:eb:7a:29:3b:45:09:a1:77:91:
50:77:eb:f1:40:85:8d:3b:1d:3b:25:4c:90:ff:c5:42:b9:4b:
cb:96:98:5c:aa:5f:26:78:fb:a9:a9:3f:c2:46:20:30:5c:b0:
02:00:b0:dc:f7:19:03:b8:ca:2a:db:af:39:f7:fb:e2:68:9b:
02:f1:b2:77:74:3f:6b:c9:3c:48:9f:1b:86:b9:7f:ff:43:d5:
1e:b6:f9:ee:4a:17:20:94:a8:89:0c:87:6e:b9:d5:bd:26:b3:
0c:23:cb:6c:c4:38:c7:46:b5:9a:15:de:0a:e2:09:13:fa:c2:
a5:a7:11:f7:8f:32:f1:2e:d9:85:24:60:cd:a8:57:21:c8:bb:
da:08:71:33:c8:9d:9c:1c:07:77:12:4b:3c:87:33:72:a7:ff:
f4:c1:88:fc:a4:e8:e0:ef:b8:d0:4a:13:f6:b0:0f:b2:39:42:
0b:a2:0c:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:17:05 2026 by rpki-client